ROOT-OS-DEBIAN-11-CVE-2026-50257 CVE-2026-50257 in xorg-server - Patched by Root

Root has patched CVE-2026-50257 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50260 CVE-2026-50260 in xorg-server - Patched by Root

Root has patched CVE-2026-50260 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-15146 CVE-2026-15146 in wget - Patched by Root

Root has patched CVE-2026-15146 in the wget package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root

Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root

Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-25942 CVE-2022-25942 in hdf5 - Patched by Root

Root has patched CVE-2022-25942 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-4806 CVE-2023-4806 in glibc - Patched by Root

Root has patched CVE-2023-4806 in the glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2024-32020 CVE-2024-32020 in git - Patched by Root

Root has patched CVE-2024-32020 in the git package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

ROOT-APP-NPM-GHSA-67MH-4WV8-2F99 GHSA-67mh-4wv8-2f99 in esbuild - Patched by Root

Root has patched GHSA-67mh-4wv8-2f99 in the esbuild package for Root:npm. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-27613 CVE-2025-27613 in git - Patched by Root

Root has patched CVE-2025-27613 in the git package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2025-69649 CVE-2025-69649 in binutils - Patched by Root

Root has patched CVE-2025-69649 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2020-7676 CVE-2020-7676 in angular - Patched by Root

Root has patched CVE-2020-7676 in the angular package for Root:npm. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2024-38827 CVE-2024-38827 in io.root.org.springframework.security:spring-security-core - Patched by Root

Root has patched CVE-2024-38827 in the io.root.org.springframework.security:spring-security-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-65900 CVE-2026-65900 in @rootio/dompurify - Patched by Root

Root has patched CVE-2026-65900 in the @rootio/dompurify package for Root:npm. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2022-41409 CVE-2022-41409 in rootio-pcre2 - Patched by Root

Root has patched CVE-2022-41409 in the rootio-pcre2 package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-47674 CVE-2026-47674 in @rootio/hono - Patched by Root

Root has patched CVE-2026-47674 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-6766 CVE-2026-6766 in rootio-nss - Patched by Root

Root has patched CVE-2026-6766 in the rootio-nss package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-55173 AVideo incomplete fix for CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink

WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026-33482 was incomplete and still does not neutralize a single & the shell background operator. CVE-2026-33482 reported that sanitizeFFmpegCommand...

PYSEC-2026-2629 MCP-Salesforce's arbitrary attribute access leads to disclosure of Salesforce auth token

Impact Disclosure of Salesforce OAuth bearer tokens used by the MCP. Patches fix applied in 0.1.10 Workarounds Rotate any Salesforce tokens/credentials used by MCP-Salesforce...